Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/80673c96-d063-36cc-81b8-6b7ff95c061c.roa
File: 80673c96-d063-36cc-81b8-6b7ff95c061c.roa (raw, json)
Hash identifier: +ZNqO5UzmD/9d+PDXRY4Vo72CS1WM7EZWJ+Yt5r4Y5U=
Subject key identifier: 3B:86:57:B3:EA:79:1D:7D:61:C9:72:20:30:4B:5D:90:A1:EA:2A:97
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858401F3FB1A4EA51160388CC9800
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/80673c96-d063-36cc-81b8-6b7ff95c061c.roa
Signing time: Sat 03 Dec 2022 12:00:00 +0000
ROA not before: Sat 03 Dec 2022 12:00:00 +0000
ROA not after: Sun 08 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 18.88.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1f:3f:b1:a4:ea:51:16:03:88:cc:98:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 3 12:00:00 2022 GMT
Not After : Jan 8 05:00:00 2023 GMT
Subject: CN=83cdd447-d0fd-4f98-abf6-e6233b5217e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7b:ee:7e:f5:ee:82:f4:d4:c7:9e:bc:38:61:
e3:81:11:2c:90:fc:ef:10:ec:11:97:d5:64:7b:39:
9b:3d:5c:63:d0:b5:b4:5d:ee:f2:b8:49:ba:13:bf:
d3:0b:ad:d6:10:ce:df:d8:f3:e7:b2:09:89:90:eb:
a7:d1:14:e6:c8:78:1c:86:14:96:1a:fd:36:13:8d:
59:40:fa:7f:37:cf:17:40:6f:0e:05:af:d0:d4:85:
27:a2:81:be:46:2b:00:7f:e2:68:a4:e0:0c:a0:51:
4b:9a:10:46:53:3a:d2:e6:49:00:8d:35:b4:9b:74:
e7:5d:29:14:63:73:14:0b:23:d4:f3:83:fe:a8:65:
e6:ec:5a:1a:4d:a3:ab:e8:0b:51:b8:bf:c2:60:49:
8e:75:0e:7d:b0:6b:4e:de:a3:32:36:f9:65:27:b0:
b9:e4:e9:4a:4d:ae:90:d2:cf:78:30:9b:71:79:10:
d6:3a:22:2d:24:12:cc:14:eb:f4:6a:ca:f6:c5:6d:
b3:d1:74:10:87:44:1b:51:e3:6e:c5:13:3a:63:98:
1e:79:69:1c:07:da:1a:bc:73:8c:64:34:e3:af:c3:
e1:78:69:7e:f3:7d:0d:00:76:78:5b:99:6c:9d:61:
48:92:80:78:ab:64:19:fb:d8:a4:eb:25:cd:d1:b0:
d9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:86:57:B3:EA:79:1D:7D:61:C9:72:20:30:4B:5D:90:A1:EA:2A:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/80673c96-d063-36cc-81b8-6b7ff95c061c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.88.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:6b:7a:cb:1c:a9:10:8d:5c:26:12:bf:19:0f:41:5b:5f:3d:
2e:d8:88:72:0a:a3:9f:3d:aa:07:4b:fe:ec:fe:25:7d:a1:65:
de:04:c0:6a:61:76:fd:54:3f:73:ed:99:db:39:66:bc:b6:bd:
85:08:2f:88:35:b6:18:39:ef:12:5d:be:66:ee:80:09:e5:e8:
98:14:7c:42:9d:5b:a5:04:73:44:90:7e:3b:70:09:a4:44:63:
c4:67:49:41:83:3f:63:8c:f4:f2:2c:c2:fe:2b:bb:18:fc:4a:
47:12:1f:bf:16:36:91:e4:8a:09:97:c6:39:2a:77:d6:c8:ea:
2d:c4:90:98:44:a9:f7:86:92:7e:b7:2f:89:87:76:45:60:c7:
7e:92:99:27:c4:e8:31:7c:2c:7a:90:a4:6a:ba:2a:06:cc:13:
db:69:59:16:ac:50:47:1e:6e:17:78:b6:a6:cf:24:a4:14:4c:
7c:09:4f:59:b3:1a:3f:07:82:08:74:25:80:4a:27:9a:7c:86:
90:fd:7e:03:de:ea:c6:f5:08:b2:86:a5:06:68:5a:30:8c:08:
a4:40:34:69:ef:8f:ae:7b:01:3e:75:a5:29:48:a5:e8:51:c1:
2f:78:3f:ec:13:a8:dc:e5:30:c9:2f:9d:6e:97:8c:37:1b:e7:
2b:95:4f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:46:16 2025 by rpki-client